
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@jesscss/style-resolver
Advanced tools
**Stylesheet import resolution across CSS, Less, SCSS, and Jess — include paths, load paths, and extension/index resolution.**
Stylesheet import resolution across CSS, Less, SCSS, and Jess — include paths, load paths, and extension/index resolution.
@jesscss/style-resolver is a building block for
Jess. Given a stylesheet's source and an import statement, it
figures out which file that import actually points to, applying each language's
lookup rules (Less and SCSS candidate expansion, partials, index files, search
paths).
It handles the mechanics of finding imports — extracting import statements from source, expanding a bare import path into the ordered list of candidate files a given language would try, and resolving that against a filesystem-like interface.
Import resolution is a shared concern the compiler and tooling both need. It is
also one of the building blocks toward the broader module/scoping story on the
Jess roadmap (whose headline is the post-.jess minimal browser build) — but this
package is just the resolver, not that feature.
This is an internal package. Most people should install
jess and use the jess CLI.
The JavaScript/TypeScript API is not yet stabilized and is intentionally
undocumented for now.
Alpha. Published to npm under both the latest and alpha dist-tags. Please
report bugs.
FAQs
Unknown package
The npm package @jesscss/style-resolver receives a total of 0 weekly downloads. As such, @jesscss/style-resolver popularity was classified as not popular.
We found that @jesscss/style-resolver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.